servo / download.servo.org Goto Github PK

<Error>
<Code>AccessDenied</Code>
<Message>Access Denied</Message>
<RequestId>08EBA35938DF3C85</RequestId>
<HostId>
fxjYErHRgxxhmtolSP2jEuZnXLAE7oVR/vlZbHgNbstOFvx7lSXJx12UrK10s8MXE6TEprDpW5I=
</HostId>
</Error>

@SimonSapin Are the ACLs incorrect somehow?

Part of #6. Using this as a TODO item for myself.

This involves both checking for SRI hashes on included resources, and check that those hashes are correct.

support localization

I think S3 treats all unknown file extensions (like .sha256) as MIME type binary/octet-stream.

I think that the Linux usage instructions at: https://download.servo.org/ are slightly outdated — the tarball (for the Linux Build (64-bit)) no longer contains a runservo.sh script, just a servo executable. This is obviously very minor.

https://download.servo.org/nightly/mac/servo-latest.dmg gives me an old nightly while http://servo-builds.s3-website-us-west-2.amazonaws.com/nightly/mac/servo-latest.dmg is giving me the newest nightly.

cc @edunham

Hi,

there is a download link for Windows Nightly on download.servo.org since #20 but the link is broken (NoSuchKey error). The links for macOS and Linux still working as expected.

When installing from the .msi or .zip I get errors for the following missing dlls:
libgstaudio-1.0-9.dll
libgstreamer-1.0-0.dll
libgobject-2.0-0.dll
libgstapp-1.0-0.dll

If there is a readme explaining how to install these on Windows I haven't found it.

Merging #49 and #51 did not cause download.servo.org to update. I had to to go cloudfront and invalidate index.html manually to make the new content visible.

It's hard to know which exact version that users are downloading. Existing Servo users would have to guess whether the binary on the site is an upgrade or not.

We should publish hash-based checksums to allow verifying downloads.

Incomplete list of ideas of what we should test:

• Code style lint?
• HTML correctness?
• Resolvability of any new URLs added
• SRI checksums match static files

cc @edunham @larsbergstrom @metajack

There is https://download.servo.org/ and https://dl.servo.org/. While the latter has the download link, the first one is not (yet) updated.

TL;DR: https://download.servo.org/nightly/linux/servo-latest.tar.gz.sha256 in Firefox gives invalid sha256sum of https://download.servo.org/nightly/linux/servo-latest.tar.gz - however in curl I see valid sha256sum.

date -uIseconds &&
  wget -q https://download.servo.org/nightly/linux/servo-latest.tar.gz &&
  wget -q https://download.servo.org/nightly/linux/servo-latest.tar.gz.sha256 &&
  sha256sum servo-latest.tar.gz; \
  cat servo-latest.tar.gz.sha256

as expected this produces

2021-12-31T15:14:28+00:00
8dcdd5b8b52dfd11dcdb1f4787ca4c037505ba95d79662d1474a61c167252edb  servo-latest.tar.gz
8dcdd5b8b52dfd11dcdb1f4787ca4c037505ba95d79662d1474a61c167252edb

however when I visit https://download.servo.org/nightly/linux/servo-latest.tar.gz.sha256 in my Firefox I get:

81739c1c16f5846b2986af52a9513574de12877a7849398e54bcabb5e68e7832

this can be reproduced in curl:

curl -i \
  'https://download.servo.org/nightly/linux/servo-latest.tar.gz.sha256' \
  -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:95.0) Gecko/20100101 Firefox/95.0' \
  -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8' \
  -H 'Accept-Language: en-US,en;q=0.5' \
  -H 'Accept-Encoding: gzip, deflate, br' \
  -H 'DNT: 1' \
  -H 'Connection: keep-alive' \
  -H 'Upgrade-Insecure-Requests: 1' \
  -H 'Sec-Fetch-Dest: document' \
  -H 'Sec-Fetch-Mode: navigate' \
  -H 'Sec-Fetch-Site: none' \
  -H 'Sec-Fetch-User: ?1' \
  -H 'Pragma: no-cache' \
  -H 'Cache-Control: no-cache'

produces

HTTP/2 200 
content-type: text/plain
content-length: 64
date: Thu, 30 Dec 2021 21:13:51 GMT
last-modified: Thu, 30 Dec 2021 06:08:16 GMT
etag: "4d92fb5d7d5a41477eceb728cea58de0"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 89b8117bd9270d922b4549a30cd5ce50.cloudfront.net (CloudFront)
x-amz-cf-pop: WAW50-C1
x-amz-cf-id: 5BHbzy1yLJLyBBBsxgOViQvi7oI5WVlUFxYjcizGrncpBSNsxcYq9w==
age: 65012

81739c1c16f5846b2986af52a9513574de12877a7849398e54bcabb5e68e7832

for comparison

curl -i \
  'https://download.servo.org/nightly/linux/servo-latest.tar.gz.sha256' 

produces

HTTP/2 200 
content-type: text/plain
content-length: 64
date: Fri, 31 Dec 2021 14:59:55 GMT
last-modified: Fri, 31 Dec 2021 05:59:32 GMT
etag: "68088e1497cedb287e210daed4fa1fb9"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8bc9c1665a1b070ea4ccaae56c1f88b7.cloudfront.net (CloudFront)
x-amz-cf-pop: WAW50-C1
x-amz-cf-id: 4e0jzoPsapp0fBtrwb7QDZr2_cM0x8aBdsL6M-V0xr75mVk4JnnuFA==
age: 1268

8dcdd5b8b52dfd11dcdb1f4787ca4c037505ba95d79662d1474a61c167252edb

I'm guessing this will want to use the upload_nightly.sh script from Servo and run on Buildbot, similar to the existing doc builder.